diff -r dc4ed4edb458 -r 02b464a6b433 doc/manual.docbook --- a/doc/manual.docbook Thu Oct 15 10:57:25 2009 +0100 +++ b/doc/manual.docbook Thu Oct 15 11:00:32 2009 +0100 @@ -365,9 +365,10 @@ Each SSH key that has access to the repository has an entry in ~hg/.ssh/authorized_keys; this is how the SSH daemon knows to give that key access. When the user connects over SSH, their -commands are run in a specially crafted restricted shell; this shell knows -which key was used to connect, determines what the user is trying to do, -and checks the access rules to decide whether to allow it. +commands are run in a custom restricted shell; this shell knows which key +was used to connect, determines what the user is trying to do, checks the +access rules to decide whether to allow it, and if allowed invokes +Mercurial internally, without forking. This restricted shell also ensures that certain Mercurial extensions are